Home • Hashes • Research • About • Swag Shop

System currently contains 118,839,891 malware samples.

Report for a sample recently added to the system:

e4ce231a83636e84e453cbac3fc30ab4887b0f4fc04a082d65ba5091fbc17d67
VirusShare info last updated 2026-09-22 00:00:00 UTC
MD5	6a7ce647463e8de505f3473916c482a0
SHA1	bd42614394c062403fdcbdc7e388997310a1df8f
SHA256	e4ce231a83636e84e453cbac3fc30ab4887b0f4fc04a082d65ba5091fbc17d67
SSDeep	12288:5R/CGYVAaZsuIO8aPcAfaXwzxFgOd6ObC8Rl6DzYt3DreR:b/CGYVAaZsFwfm88W/76Dwv
Authentihash	4fc81411d7c7d4dff3d080ea2f2b5a6e67aaadc3230d70301e6fd9cd0ac054a8
Size	1,672,704 bytes
File Type	PE32 executable (GUI) Intel 80386, for MS Windows
Mime Type	application/x-dosexec
Extension	exe
TrID	Win64 Executable (generic) (34.1%) Win32 Executable (generic) (23.5%) Windows Icons Library (generic) (10.7%) OS/2 Executable (generic) (10.6%) Generic Win/DOS Executable (10.4%)
Detections (62/69)	ALYac Win32.Virlock.Gen.5 APEX Malicious AVG Win32:VirLock [Inf] Acronis suspicious AhnLab-V3 Win32/Nabucur.B Alibaba Ransom:Win32/PolyRansom.4240cf91 Antiy-AVL Virus/Win32.PolyRansom.a Arcabit Win32.Virlock.Gen.5 Avast Win32:VirLock [Inf] Avira TR/Crypt.XPACK.Gen7 BitDefender Win32.Virlock.Gen.5 Bkav W32.Malware.17D5F0A CAT-QuickHeal Ransom.PolyRansom.B2 CTX exe.ransomware.virlock ClamAV BC.Win.Virus.Ransom-9157.B CrowdStrike win/malicious_confidence_100% (W) Cylance Unsafe Cynet Malicious (score: 100) DrWeb Win32.VirLock.4 ESET-NOD32 Win32/Virlock.C virus Elastic malicious (high confidence) Emsisoft Win32.Virlock.Gen.5 (B) F-Secure Trojan.TR/Crypt.XPACK.Gen7 Fortinet W32/Virlock.K GData Win32.Virlock.Gen.5 Google Detected Gridinsoft Virus.Win32.Wlock.sa Jiangmin Win32/Polyransom.a K7AntiVirus Virus ( 0040f99f1 ) K7GW Trojan ( 0040f99f1 ) Kaspersky Virus.Win32.PolyRansom.a Kingsoft Win32.Infected.AutoInfector.a Lionic Virus.Win32.Virlock.n!c Malwarebytes Malware.Heuristic.2051 MaxSecure Virus.PolyRansom.a McAfeeD Real Protect-LS!6A7CE647463E MicroWorld-eScan Win32.Virlock.Gen.5 Microsoft Trojan:Win32/NabucurObfs NANO-Antivirus Trojan.Win32.PolyRansom.exypia Paloalto generic.ml Panda Trj/CI.A Rising Virus.VirLock!1.A08A (CLASSIC) Sangfor Suspicious.Win32.Save.a SentinelOne Static AI - Malicious PE Skyhigh W32/VirRansom Sophos W32/VirRnsm-A Symantec W32.Virlock!inf TACHYON Virus/W32.VirRansom.C Tencent Virus.Win32.Polyransom.a Trapmine malicious.high.ml.score TrellixENS W32/VirRansom TrendMicro PE_VIRLOCK.E TrendMicro-HouseCall PE_VIRLOCK.E VBA32 Virus.VirLock VIPRE Win32.Virlock.Gen.5 Varist W32/S-7136ec3b!Eldorado VirIT Win32.CryptorGen.A Xcitium Packed.Win32.Graybird.B@5hgpd5 Yandex Virus.Virlock.Gen.AAJ ZoneAlarm W32/VirRnsm-A alibabacloud Virus:Win/Virlock.C tehtris Generic.Malware VirusTotal Report submitted 2026-08-21 13:27:38 UTC
ExIF Data	CodeSize 1671680 EntryPoint 0x1964ce FileSize 1634 kB FileType Win32 EXE FileTypeExtension exe ImageFileCharacteristics No relocs, Executable, No line numbers, No symbols, 32-bit ImageVersion 0 InitializedDataSize 0 LinkerVersion 5.12 MIMEType application/octet-stream MachineType Intel 386 or later, and compatibles OSVersion 4 PEType PE32 Subsystem Windows GUI SubsystemVersion 4 TimeStamp 1970:01:01 00:02:03+00:00 UninitializedDataSize 0